show vpn ipsec dataplane policy

Ze command

Syntax

show vpn ipsec dataplane policy

Registry path

show vpn ipsec dataplane policy

Mode

Read-only

Wire method

ze-show:vpn-ipsec-dataplane-policy

Global pipes

yes

Description

Show the Security Policy Database the kernel holds.
Lists each policy with its selector prefixes and ports, direction, priority,
upper-layer protocol, if_id, tunnel endpoints, and the peer that installed
it. A policy with no matching SA is the failure this command exists to show.
RFC 4301 Section 4.4 keeps the SPD and the SAD separate, and so does this
tree.

Arguments

No command-specific arguments listed.